Red Hat Product Security determined this is not a security vulnerability. BusyBox internal TLS is intentionally minimal and documents in FEATURE_WGET_HTTPS that it does not verify peer identity or provide full TLS security; missing Finished verify_data checking is consistent with that documented design and does not cross a separate security boundary warranting a CVE.
Description
Red Hat Product Security determined this is not a security vulnerability. BusyBox internal TLS is intentionally minimal and documents in FEATURE_WGET_HTTPS that it does not verify peer identity or provide full TLS security; missing Finished verify_data checking is consistent with that documented design and does not cross a separate security boundary warranting a CVE.
Published:
n/a
Score:
n/a
EPSS:
n/a
KEV:
No
Impact:
n/a
Action:
n/a
Analysis
No data.
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
No reference.
History
Tue, 13 Oct 2026 15:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Red Hat Product Security determined this is not a security vulnerability. BusyBox internal TLS is intentionally minimal and documents in FEATURE_WGET_HTTPS that it does not verify peer identity or provide full TLS security; missing Finished verify_data checking is consistent with that documented design and does not cross a separate security boundary warranting a CVE. |
Subscriptions
No data.
MITRE
Status: REJECTED
Assigner: redhat
Published: No published date
Updated: 2026-10-13T15:35:13.790Z
Reserved: 2026-09-10T09:42:04.559Z
Link: CVE-2026-88836
Vulnrichment
No data.
NVD
Status : Rejected
Published: 2026-10-13T16:17:23.960
Modified: 2026-10-13T16:17:23.960
Link: CVE-2026-88836
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses
No weakness.